Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tolerate OpenJCEPlus FIPS binaries with jlink #375

Merged

Conversation

jasonkatonica
Copy link
Contributor

When using jlink to create a JRE a user may make use of the jlink argument --strip-debug. This argument executes a strip to remove unnecessary symbols and information from a library to provide for a minimal footprint size of the runtime being created.

This update skips performing any strip commands against the FIPS libraries contained in the openjceplus module. This is required since any changes to the FIPS libraries will cause a failure when loading the library since a self verification process is done when the FIPS library is loaded.

Signed-off-by: Jason Katonica katonica@us.ibm.com

When using `jlink` to create a JRE a user may make use of the `jlink`
argument `--strip-debug`. This argument executes a strip to remove
unnecessary symbols and information from a library to provide for
a minimal footprint size of the runtime being created.

This update skips performing any strip commands against the FIPS
libraries contained in the `openjceplus` module. This is required
since any changes to the FIPS libraries will cause a failure when
loading the library since a self verification process is done when the
FIPS library is loaded.

Signed-off-by: Jason Katonica <katonica@us.ibm.com>
@keithc-ca keithc-ca self-assigned this Aug 23, 2024
@keithc-ca keithc-ca self-requested a review August 23, 2024 15:10
@keithc-ca
Copy link
Member

Jenkins compile xlinux jdk17

3 similar comments
@keithc-ca
Copy link
Member

Jenkins compile xlinux jdk17

@keithc-ca
Copy link
Member

Jenkins compile xlinux jdk17

@keithc-ca
Copy link
Member

Jenkins compile xlinux jdk17

@keithc-ca keithc-ca merged commit 19c050f into ibmruntimes:openj9 Aug 23, 2024
4 checks passed
@jasonkatonica jasonkatonica deleted the katonica/issue/fixjlinkjre17 branch September 4, 2024 12:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants